CVE-2026-23228

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23228
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982 Patch
https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0 Patch
https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553 Patch
https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa Patch
https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f Patch
https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc Patch
https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*
History

18 Mar 2026, 13:27

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982 - () https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982 - Patch
References () https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0 - () https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0 - Patch
References () https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553 - () https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553 - Patch
References () https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa - () https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa - Patch
References () https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f - () https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f - Patch
References () https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc - () https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc - Patch
References () https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f - () https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f - Patch

23 Feb 2026, 04:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553 -
Summary
  • (es) Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux: smb: servidor: corregir fuga de active_num_conn en ksmbd_tcp_new_connection() En caso de fallo de kthread_run() en ksmbd_tcp_new_connection(), se libera el transporte a través de free_transport(), lo que no decrementa active_num_conn, fugando este contador. Reemplazar free_transport() con ksmbd_tcp_disconnect().

19 Feb 2026, 16:27

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0 -
  • () https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f -

18 Feb 2026, 16:22

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-18 16:22

Updated : 2026-03-18 13:27

NVD link : CVE-2026-23228

Mitre link : CVE-2026-23228

CVE.ORG link : CVE-2026-23228

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime